DataStax Astra is now serverless — get your free Astra database!

Jump to main content

Support
DataStax Home
Downloads

Learn
Drivers
Glossary
Try for free

About DSE Advanced Security
Security FAQs
Security checklists
Securing the environment
Configuring DSE Unified Authentication
Connecting to authentication enabled clusters
Managing roles
Authorizing access to database resources
Auditing activity
Transparent data encryption
Configuring SSL
Dynamically set LDAP Authenticator Connection Search Password

Can't find what you're looking for? Try searching other guides

DataStax 5.1 Security Guide Earlier DSE version Latest 5.1 patch: 5.1.22

About DSE Advanced Security
An overview of DataStax Enterprise security features.
Security FAQs
DataStax Enterprise security features frequently asked questions.
Security checklists
Lists of security measures required for protecting a DataStax Enterprise database.
Securing the environment
To fully protect your data, ensure that your network is secure and temporary files are secure.
Configuring DSE Unified Authentication
Detailed steps to set up authentication and authorization in a DataStax Enterprise environment.
Connecting to authentication enabled clusters
Setting up local or DSE managed JMX user authentication.
Managing roles
Manage access to database objects using role-based access control (RBAC).
Authorizing access to database resources
Configure roles and assign permissions to manage access to database resources for authenticated users.
Auditing activity
Information about enabling and configuring data auditing in DataStax Enterprise.
Transparent data encryption
Configure transparent data encryption (TDE) on sensitive data stored in tables and in configuration files.
Configuring SSL
Securing data inflight for DataStax Enterprise components.
- About SSL
  Securing data in-flight on DataStax Enterprise.
- Setting up SSL certificates
  General steps for generating certificate signing requests, signing, and creating a keystore and truststore for development and production environments.
- Securing internal transactional node connections
  Node-to-node (internode) encryption protects data that is transferred between nodes in a cluster using SSL.
- Securing client to cluster connections
  Client-to-node encryption protects data in flight from client machines to a database cluster using SSL and establishes a secure channel between the client and the coordinator node.
- Securing Spark connections
  Communication between Spark applications and transactional nodes, masters and workers, and intercommunication between Spark drivers and executors can be encrypted.
- Using CQL shell (cqlsh) with SSL
  Establish connections to clusters with Kerberos, internal or external authentication, and SSL enabled.
- Setting up SSL for nodetool, dsetool, and dse advrep
  Using nodetool, dsetool, and dse advrep with SSL encryption.
- Setting up SSL for jconsole (JMX)
  Using jconsole with SSL encryption.
- Connecting sstableloader to a secured cluster
  Steps (for a development environment) to configure the sstableloader (bulk loader) with Kerberos or SSL.
- Enabling SSL encryption for DSEFS
  DSEFS can use SSL encryption.
Dynamically set LDAP Authenticator Connection Search Password
Dynamically set LDAP Authenticator Connection Search Password.

Configuring SSL

Securing data inflight for DataStax Enterprise components.

About SSL
Securing data in-flight on DataStax Enterprise.
Setting up SSL certificates
General steps for generating certificate signing requests, signing, and creating a keystore and truststore for development and production environments.
Securing internal transactional node connections
Node-to-node (internode) encryption protects data that is transferred between nodes in a cluster using SSL.
Securing client to cluster connections
Client-to-node encryption protects data in flight from client machines to a database cluster using SSL and establishes a secure channel between the client and the coordinator node.
Securing Spark connections
Communication between Spark applications and transactional nodes, masters and workers, and intercommunication between Spark drivers and executors can be encrypted.
Using CQL shell (cqlsh) with SSL
Establish connections to clusters with Kerberos, internal or external authentication, and SSL enabled.
Setting up SSL for nodetool, dsetool, and dse advrep
Using nodetool, dsetool, and dse advrep with SSL encryption.
Setting up SSL for jconsole (JMX)
Using jconsole with SSL encryption.
Connecting sstableloader to a secured cluster
Steps (for a development environment) to configure the sstableloader (bulk loader) with Kerberos or SSL.
Enabling SSL encryption for DSEFS
DSEFS can use SSL encryption.

General Inquiries: +1 (650) 389-6000 info@datastax.com

© DataStax | Privacy policy | Terms of use | Updated: 25 March 2021

Build time: 2021-03-25 12:54:01.858

DataStax, Titan, and TitanDB are registered trademarks of DataStax, Inc. and its subsidiaries in the United States and/or other countries.

Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries.

Kubernetes is the registered trademark of the Linux Foundation.

security security51